ae2cf1bbd5d9c324dafa15fd781d5cf8913c615a669e135b73500cdada18f215

Classification: Malicious

ae2cf1bbd5d9c324dafa15fd781d5cf8913c615a669e135b73500cdada18f215 is a trojan (Windows executable, 615.5 KB). Linked to Bitpaymer malware.

Detection summary

  • 90 antivirus detections (82% detection ratio)
  • 0 IDS alerts
  • 4 processes observed
  • 3 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: BITPAYMER (S0570)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Gen:Variant.Ransom.Friedex Hybrid-Analysis 2019-11-05 19:45:22 2019-11-05 19:45:22 S0570 BitPaymer

Sample information

Filenames
sample.bin
File type
PE32 executable (GUI) Intel 80386, for MS Windows
Size
630272 bytes
MD5
fdbcc27417a705f78f340db3101bd95d
SHA-1
ee0fad42e180ceecd0362874ea3b9ddca6c4a064
SHA-256
ae2cf1bbd5d9c324dafa15fd781d5cf8913c615a669e135b73500cdada18f215
First indexed
2019-11-05 19:45:22
Last updated
2026-09-30 00:39:39

Antivirus detections

EngineDetection
MicroWorld-eScanGen:Variant.Ransom.Friedex.3
FireEyeGeneric.mg.fdbcc27417a705f7
CAT-QuickHealRansom.Cryptor.B5
McAfeeRansomware-GEE!FDBCC27417A7
ZillyaTrojan.Cryptor.Win32.155
K7AntiVirusTrojan ( 0051497b1 )
AlibabaRansom:Win32/Locky.1257595e
K7GWTrojan ( 0051497b1 )
CrowdStrikewin/malicious_confidence_100% (W)
ArcabitTrojan.Ransom.Friedex.3
TrendMicroRansom_LOCKY.SMALY
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Malware-gen
GDataWin32.Trojan.Malpacker.A
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Ransom.Friedex.3
NANO-AntivirusTrojan.Win32.Encoder.eshgyq
Paloaltogeneric.ml
AegisLabTrojan.Win32.Generic.4!c
Ad-AwareGen:Variant.Ransom.Friedex.3
EmsisoftGen:Variant.Ransom.Friedex.3 (B)
ComodoMalware@#twz0kxgctbig
F-SecureHeuristic.HEUR/AGEN.1029782
DrWebTrojan.Encoder.13570
VIPRETrojan.Win32.Generic!BT
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Generic.jh
Trapminemalicious.high.ml.score
SophosMal/Generic-S
SentinelOneDFI - Malicious PE
JiangminTrojan.Cryptor.ci
WebrootW32.Trojan.Gen
AviraHEUR/AGEN.1029782
MAXmalware (ai score=100)
Antiy-AVLTrojan[Ransom]/Win32.Cryptor
MicrosoftRansom:Win32/Locky
Endgamemalicious (high confidence)
ViRobotTrojan.Win32.Agent.121673
ZoneAlarmHEUR:Trojan.Win32.Generic
AhnLab-V3Trojan/Win32.Cryptor.C2111641
Acronissuspicious
VBA32Trojan-Ransom.Cryptor
ALYacGen:Variant.Ransom.Friedex.3
TACHYONRansom/W32.Cryptor.630272
CylanceUnsafe
ESET-NOD32a variant of Win32/Kryptik.FWCI
TrendMicro-HouseCallRansom_LOCKY.SMALY
RisingRansom.Locky!8.1CD4 (TFE:1:OUb4ZeIQMBP)
YandexTrojan.Cryptor!wltguEIFf/Y
IkarusTrojan.Win32.Krypt
eGambitGeneric.Malware
FortinetW32/GenKryptik.AUBW!tr
AVGWin32:Malware-gen
Cybereasonmalicious.417a70
PandaTrj/GdSda.A
Qihoo-360Win32/Trojan.Ransom.4ec
ALYacGen:Variant.Ransom.Locky.299
AVGWin32:Evo-gen [Trj]
AhnLab-V3Trojan/Win.Cryptor.R660908
AlibabaTrojan:Win32/Kryptik.4f79d434
ArcabitTrojan.Ransom.Locky.299
AvastWin32:Evo-gen [Trj]
AviraHEUR/AGEN.1338908
BitDefenderGen:Variant.Ransom.Locky.299
BkavW32.AIDetectMalware
CTXexe.ransomware.locky
CynetMalicious (score: 100)
DeepInstinctMALICIOUS
ESET-NOD32a variant of Win32/Kryptik.HEGX
Elasticmalicious (high confidence)
EmsisoftGen:Variant.Ransom.Locky.299 (B)
F-SecureHeuristic.HEUR/AGEN.1338908
GoogleDetected
Kingsoftmalware.kb.a.998
LionicTrojan.Win32.Generic.4!c
MalwarebytesMalware.AI.3780525029
MaxSecureTrojan.Malware.7164915.susgen
McAfeeDReal Protect-LS!FDBCC27417A7
MicroWorld-eScanGen:Variant.Ransom.Locky.299
PandaTrj/CI.A
SangforTrojan.Win32.Save.a
SentinelOneStatic AI - Suspicious PE
SkyhighBehavesLike.Win32.Generic.jh
TencentWin32.Trojan.Generic.Vimw
VIPREGen:Variant.Ransom.Locky.299
VirITTrojan.Win32.CryptLocky.EQ
XcitiumMalware@#twz0kxgctbig
YandexTrojan.GenAsa!PjE277WCaHs
alibabacloudRansomWare

Network contacts

46.183.165.45 146.120.110.46 193.0.178.140

Process list

NameCommand line
sample.bin.exe
iexplore.exe%USERPROFILE%\Desktop\lukitus.htm
iexplore.exeSCODEF:2592 CREDAT:275457 /prefetch:2
cmd.exe/C del /Q /F "%TEMP%\sys2D28.tmp"